Adobe Blazeds vulnerabilities

3 vulnerabilities

Known vulnerabilities in Adobe Blazeds, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2011-2092adobeblazeds+2
EPSS score
6.06%
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX data, which allows attackers to have an unspecified impact via unknown vectors, related to a "deserialization vulnerability."5CVE-2011-2093adobeblazeds+2
EPSS score
3.77%
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."6.5CVE-2009-3960adobeblazeds+4KEVRansomware
EPSS score
90.12%
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.